Function origin_allowed

packages/server/src/auth.rs:219–224

(config: &Config, headers: &HeaderMap)

}

fn origin_allowed(config: &Config, headers: &HeaderMap) -> bool {
    headers
        .get(header::ORIGIN)
        .and_then(|value| value.to_str().ok())
        .is_some_and(|origin| origin_is_allowed_for_request(config, headers, origin))
}

fn origin_is_allowed_for_request(config: &Config, headers: &HeaderMap, origin: &str) -> bool {
    origin_is_allowed(config, origin) || origin_matches_request_host(headers, origin)